Pendahuluan
Web security reconnaissance adalah fase paling krusial dalam bug hunting dan penetration testing. Di tahun 2026, tools dan teknik terus berevolusi seiring kompleksitas aplikasi web modern.
Passive Reconnaissance
Certificate Transparency Logs
BASH
curl -s "https://crt.sh/?q=%25.target.com&output=json" | jq '.[].name_value' | sort -uDNS Enumeration
BASH
subfinder -d target.com -all -silent
amass enum -passive -d target.comTechnology Fingerprinting
BASH
wappalyzer https://target.com
whatweb https://target.comActive Reconnaissance
Directory Bruteforce
BASH
ffuf -u https://target.com/FUZZ \
-w directory-list-2.3-medium.txt \
-fc 404,403 -t 100Parameter Fuzzing
BASH
ffuf -u 'https://target.com/api/v1/users?FUZZ=test' \
-w params.txt -fc 400CORS Testing
BASH
curl -sI "https://api.target.com/" \
-H "Origin: https://evil.com" | grep -i "access-control"Tools Wajib 2026
| Tool | Fungsi |
|---|---|
| Subfinder | Passive subdomain enum |
| ffuf | Fast web fuzzer |
| nuclei | Vulnerability scanner |
| httpx | HTTP probe + technology detect |
| katana | Web crawler |
| gau/waybackurl | Archive URL gathering |
Pipeline Automation
BASH
subfinder -d target.com | httpx | nuclei -t cves/ -o vulns.txtKesimpulan
Recon adalah kunci sukses bug hunting. Kombinasi passive + active reconnaissance dengan pipeline automation akan mengungkap permukaan serangan yang lebih luas.
